CVE-2026-86101

UNKNOWN

Description

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.

Timeline

Published:September 30th, 2026 12:16 AM

Last modified:September 30th, 2026 4:40 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-285 CWE-863

References & Reports

Advisories, patches, and third-party reports

https://psirt.watchguard.com/CVE-2026-86101

Source: NIST NVD · Data may lag official sources by up to one minute